keycloak_user_federation: remove lastSync param from kc API respons…

…es (#8812)

* remove `lastSync` param from kc API responses

* add blank line to satisfy sanity check

* add changelog fragment

* fix NoneType error introduced by changed normalize func return value

(cherry picked from commit 5d9a7ab)

changelogs/fragments/8812-keycloak-user-federation-remove-lastSync-param-from-kc-responses.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - keycloak_user_federation - remove ``lastSync`` parameter from Keycloak responses to minimize diff/changes (https://github.com/ansible-collections/community.general/pull/8812).

plugins/modules/keycloak_user_federation.py

@@ -714,12 +714,15 @@
 
 
 def normalize_kc_comp(comp):
-    # kc completely removes the parameter `krbPrincipalAttribute` if it is set to `''`; the unset kc parameter is equivalent to `''`;
-    # to make change detection and diff more accurate we set it again in the kc responses
     if 'config' in comp:
+        # kc completely removes the parameter `krbPrincipalAttribute` if it is set to `''`; the unset kc parameter is equivalent to `''`;
+        # to make change detection and diff more accurate we set it again in the kc responses
         if 'krbPrincipalAttribute' not in comp['config']:
             comp['config']['krbPrincipalAttribute'] = ['']
 
+        # kc stores a timestamp of the last sync in `lastSync` to time the periodic sync, it is removed to minimize diff/changes
+        comp['config'].pop('lastSync', None)
+
 
 def sanitize(comp):
     compcopy = deepcopy(comp)